Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

wildfly/jboss-ejb-client

              main @ b22da0d
            

Fixes

CVEs

MEDIUM

Peak severity

Highlights

Privilege Escalation: 1 prior fix. Scrutinize any change in this area.

src/main/java/org/jboss/ejb/client/legacy/JBossEJBProperties.java: most-fixed (1 issue). Treat as high-risk during review.

0 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Privilege Escalation: Execution under restrictive Java Security Manager sandboxes can fail or behave unexpectedly if global configuration modifications are not properly isolated in privileged actions. Wrapping default supplier setup blocks in doPrivileged blocks prevents context-related privilege failures.

Information Disclosure: Publicly accessible privileged actions in the JBoss EJB client allow remote attackers with network access to read and disclose sensitive server-side information.

Denial of Service: Improper cleanup or tracking of specific EJB transaction objects allows them to accumulate over time, leading to memory exhaustion and service unavailability.